Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74d24495-fc83-40fe-9428-8318f9be75f6.roa
File:                     74d24495-fc83-40fe-9428-8318f9be75f6.roa (raw, json)
Hash identifier:          cq9dF3CC9EcgGFSbU+Rszq8xWl2NvX+NwKpaayhTaHM=
Subject key identifier:   0E:AC:1B:7D:76:B1:7E:F0:5F:83:4F:FC:6E:F6:8C:98:7D:23:F4:75
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3F6E5FF58BAD2A241F103668D0B01A34941240AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74d24495-fc83-40fe-9428-8318f9be75f6.roa
Signing time:             Wed 05 Aug 2026 00:21:19 +0000
ROA not before:           Wed 05 Aug 2026 00:21:19 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:8090::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6e:5f:f5:8b:ad:2a:24:1f:10:36:68:d0:b0:1a:34:94:12:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  5 00:21:19 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=70a3d274cabda5ac9ab695e05e9369482ecfc248f8b188a1916f5e5a852280f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:04:83:7a:48:f9:3c:e8:8c:93:fd:b8:25:
                    c6:0d:36:37:13:3f:e2:6b:48:2e:58:2b:2a:02:f8:
                    1a:8f:fe:e5:43:e1:1c:64:69:21:ed:aa:5c:a5:c6:
                    a4:b3:46:07:3c:9a:d9:e1:6b:56:35:29:a2:65:05:
                    f2:0f:7e:de:87:d1:7b:b8:5a:3e:38:76:de:ea:29:
                    8b:a7:02:f2:45:20:b3:9e:1a:25:d7:67:3b:93:e4:
                    23:a5:76:fc:96:30:06:59:8f:f7:8e:a9:fa:ff:13:
                    67:67:63:7a:93:bc:e3:c9:ff:5f:82:85:63:ca:92:
                    10:d6:30:3f:39:24:fa:cf:76:59:cb:39:23:be:19:
                    77:c0:bc:6a:79:bd:68:b1:33:d9:19:42:9c:39:55:
                    01:6a:d3:f9:5d:6a:7b:d5:06:0a:a6:77:89:01:6b:
                    5c:ff:98:fa:27:5f:6b:56:ce:7b:75:b5:c2:49:73:
                    ca:25:e7:bb:ea:ce:12:bb:53:7e:88:79:49:6b:d1:
                    10:d2:30:8f:d3:53:91:d0:00:24:a7:82:24:c4:35:
                    5a:e4:28:f3:94:e5:1a:66:0b:64:56:8c:de:0e:d7:
                    d2:33:92:07:08:8d:79:91:1a:8b:74:11:36:5a:ed:
                    19:4d:15:a2:15:50:43:f9:65:63:cc:a3:95:d2:4e:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:1B:7D:76:B1:7E:F0:5F:83:4F:FC:6E:F6:8C:98:7D:23:F4:75
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74d24495-fc83-40fe-9428-8318f9be75f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:8090::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:90:60:71:a5:25:01:2b:d3:50:eb:7a:17:6a:3d:2f:a5:
         92:6a:ce:99:a4:da:f4:52:46:ca:d5:9b:b3:04:84:c5:95:d0:
         54:85:e6:a0:76:dc:a3:aa:9a:d3:3b:40:bf:9f:00:47:d2:f3:
         26:3e:4a:e5:f0:85:6a:42:e0:cd:78:71:be:ce:1a:12:25:6d:
         bd:84:4e:7a:01:b0:f7:24:64:3c:b4:c5:a6:b6:74:9f:fc:91:
         5e:2c:2f:1c:04:09:1a:85:86:1a:f7:0c:bb:44:59:be:db:0f:
         fa:fb:af:68:b2:12:c1:07:be:e6:6f:1e:35:66:95:a1:c5:cb:
         e4:9b:2e:f7:f2:b7:a8:1e:ed:a3:cb:4d:a6:51:3d:7e:c8:35:
         43:f3:f6:14:f7:85:49:23:d4:6f:e9:49:dc:73:9a:85:03:d4:
         40:40:f0:69:5e:ab:bc:9e:81:b1:22:89:e3:4d:4c:c2:db:52:
         74:64:a4:3e:83:5e:d6:e9:16:d6:05:01:df:c3:e1:7a:a4:a2:
         58:f4:3c:15:d7:19:83:f0:47:f8:30:18:e5:74:31:49:cd:1f:
         57:88:ff:09:87:39:b0:60:bd:78:49:43:92:fb:15:29:64:b7:
         25:ea:ad:50:1e:6d:9c:b6:b2:17:fc:4b:80:b1:99:12:e8:06:
         15:89:9d:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:24:57 2026 by rpki-client